1. SUBJECT

The company with the name, "Alfa Quality Foods Trade, Sole Proprietorship", (hereinafter S.A. or the Company), with headquarters at 6th km Chalkida – Aidipsos 34100, Euboea and Athens Offices at Georgiou Lyra 47, Kifisia 14564 is committed to protecting the privacy of its website visitors and takes seriously its obligation to protect their personal data. We will be clear and honest about the data we collect and the purposes for which we collect it.

This policy includes and refers to the following:

• Your personal data that we collect and process because of your relationship with us as a visitor and through your use of the website and potential customer.
• Where we get the data from.
• What do we do with the data.
• How we store data.
• To whom do we transfer/disclose the data.
• How we treat your data protection rights.
• How we comply with data protection rules.

All personal data is collected and processed in accordance with the personal data protection legislation of Greece and the European Union.

2. PERSONAL DATA WE COLLECT

Personal data is any information relating to you that you choose to provide us that allows us to identify you, such as your name, contact details, payment details and information relating to your access to our website and our email correspondence.

We may collect personal data from you that you choose to provide us when you contact us through the form on the company website. Specifically, we may collect the following categories of information:

a. Name and surname, address, e-mail, telephone number, CV. Which are collected through the communication platform and through the "career opportunities" platform,

b. Information when using the website,

c. Communications you exchange with us or direct to us via letters, e-mails, chats, calls and social networks,

d. Location, including real-time geolocation of your computer or device via GPS, Bluetooth, and IP address, as well as user-derived Wi-Fi hotspot and cell tower locations, if you use location-based features and enable location services settings on your device and computer.

The website will retain the above data only for as long as is necessary to fulfill the purposes for which it was collected or as required by law.

Consent for the collection of your personal data is specifically given when the above are used.

3. LEGAL BASE AND PURPOSES OF PROCESSING PERSONAL DATA - RETENTION

We only process your personal data when we have a legal basis to do so. The legal basis depends on the reasons we have collected and need to use your personal data.

The processing of your personal data that the Company has, is taking place:

1. Because you duly gave your relevant consent, as explained above,
2. When the process is necessary for the execution of a contract
3. For the purposes with legitimate interest of the Company.
4. For the compliance of the Company with its legal obligation.

Your data may be used for the following purposes:

a. Providing products and services you request: We use your data to provide you with the services you request in reference to the products or services provided through our website.

b. Credit Card or Other Payment Verification/Control: We use your payment information for accounting, billing and auditing purposes, as well as to detect or prevent any incidents of fraud. The relevant data is automatically transferred to the secure banking environment and is protected by the respective Bank.

c. Administrative or legal purposes: We use your data for statistical purposes and marketing analysis, customer studies, or in order to deal with a claim or dispute. Please note that we reserve the right to perform profiling based on the data we collect from you. Any profiling activity will be carried out without your prior consent only and after all reasonable efforts have been made to ensure the accuracy of the data it is based on. By providing any personal data you expressly consent to the possibility of us profiling in accordance with this Privacy Policy.

d. Marketing: From time to time, we contact you electronically and provide you with information about our offers and products. You will have the choice to receive or not to receive such communications, depending on whether or not you subscribe to our newsletter. Also, in each of our electronic communications you will have the opportunity to indicate that you no longer wish to receive direct marketing material.

We may also process your personal data for the following reasons:

- To comply with a legal obligation, (e.g. tax and accounting reasons).
- Because you have given us your consent to use your personal data for that specific reason.

Only people aged 15 and over can give their own consent. For children under this age, the consent of parents or legal guardians is required.

We do not retain your data for longer than is necessary to fulfill the purpose for which it is processed. To determine the appropriate retention period, we take into account the amount, nature and sensitivity of personal data, the purposes for which we process it and the ability to achieve those purposes by other means.

We also take into account the time periods for which we may need to retain personal data in order to fulfill our legal obligations or to respond to complaints/inquiries and to protect our legal rights in the event of a claim. In addition, we will retain your personal data for the purposes of promoting our products, unless of course you decide to request their deletion.

When we no longer need your personal data, we delete or securely destroy it. We also consider whether and how we can minimize over time the personal data we use, and whether we can anonymize it so that it can no longer be associated with you or identify you. In this case, we may use them without further notice.

In case of redirection to a third-party website, the privacy policy and cookies policy of the respective third party apply. Furthermore, the Company is not responsible for the content posted on third-party websites, nor for the respective privacy and cookies policies of those third parties.

4. SECURITY OF PERSONAL DATA

We follow strict security procedures when storing and disclosing your personal data, as well as to protect it from accidental loss, destruction or damage. The data you provide us is protected in accordance with our company's security policy.

We may disclose your data to trusted third parties for the purposes set out in this Privacy Policy. We require all third parties to have appropriate technical and operational security measures in place to protect your personal data, in accordance with Greek and EU data protection legislation.

5. SHARING OF PERSONAL DATA

We may share your personal data with the following third parties for the purposes contained in this Privacy Policy:

a. Trusted service providers with whom we work to conduct our business, such as service providers who manage our website or marketing services providers.

b. Banks to whom credit and debit card details are transmitted, facilitating your payments to us and fraud monitoring, who may need payment method information to make payments or ensure the security of your payment transaction.

c. Legal and other professional advisers, courts and law enforcement agencies in all countries in which we operate, in order to exercise our legal rights arising from our contract with you.

d. Social Networks: Through our Website and App or prior to your visit to our Website and App, you may have access to third-party social networks. When you are registered with your social media account, we will receive the personal data you choose to share with us through those social media in accordance with their privacy settings in order to improve and personalize your use of our website or our app. We may use social media links on our website or app. This will result in your details being shared with your social media provider and potentially displayed on your social media profile and accessible to others in your network. Please consult the privacy statement of these third party social media providers to learn more about these practices.

e. The personal data we collect from you is not transferred or processed outside the European Union.

We understand the importance of taking extra precautions to protect children's privacy and safety. Therefore, children under the age of 15 will not be allowed to place any order from our online store.

Where the processing of personal data is based on your consent, you have the option to withdraw your consent to the processing or delete your personal data at any time. You can do this by submitting a request through our website or through our mail services (see PRIVACY RIGHTS below).

6. PRIVACY RIGHTS

Data subjects have the right, at any time, to exercise their rights provided by applicable legislation regarding the collection and processing of personal data. These rights are as follows:

Get informed, if we keep your personal data and, if so, what this data is and why we keep/use it.

Request access to your personal data (commonly known as a "data subject access request"). This enables you to obtain a copy of your personal data that we hold and check whether we are processing it lawfully.

Request the correction of your personal data that we hold. This enables you to correct any incomplete or inaccurate information we have about you.

Request the deletion of your personal data. This enables you to request that we delete or remove personal data where there is no reason for us to continue processing it. You also have the right to ask us to delete or remove your personal data where you have exercised the right to object to its processing (see below). You can delete this personal data when its use is based on your consent.

Object to the processing of your personal data where we invoke a legitimate interest (or the interest of a third party), but there is a reason in your own case that makes you want to object to its processing on this ground. You also have the right to object if we process your personal data for direct marketing purposes.

Object to automated decision-making, such as profiling, which should not be the subject of automated decision-making using your personal data or profile.

Request the restriction of the processing of your personal data. This allows you to ask us to stop processing your personal data, for example, if you want us to ascertain its accuracy or the reason for processing it.

Request the transfer of your personal data to you or another party, (commonly known as the right to "data portability"), in an electronic and structured format. This allows you to receive your data from us in an electronically usable form and to be able to transmit your data to another party in an electronically usable form.

Withdrawal of consent. In the limited cases where you may have provided your consent to the collection, processing and transmission of your personal data for a specific purpose, you have the right to withdraw your consent to that processing at any time. After we receive notice that you have withdrawn your consent, we will stop processing your data for the purpose or purposes for which you originally agreed, unless we have another legal basis to do so lawfully.

This policy should help you better understand how we use your personal information, it explains in detail the types of personal information we collect, what we use it for and who we may share it with. If you have any further questions about this policy or how we handle your personal information, which are not answered here or via our online form, please contact us by e-mail info@alfaemporiki.com.

You will not have to pay a fee to access your personal data (or exercise any of your other rights). However, we may charge you a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, in such cases we may refuse to comply with your request. Additionally and to the extent that you have this right, you are entitled to submit a complaint directly to the relevant supervisory authority (Hellenic Data Protection Authority, dpa.gr).

7. CHANGES TO THE PRIVACY POLICY

The Privacy Policy may change from time to time and any changes to the privacy statement will be communicated to you via a notice on our website.